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Abstract 

We describe simple call-by-value and call-by-name abstract machines, 
expressed with the help of Felleisen's evaluation contexts, for a toy func- 
tional language. Then we add a simple control operator and extend the 
abstract machines accordingly. We give some examples of their use. Then, 
restricting our attention to the sole core (typed) A-calculus fragment aug- 
mented with the control operator, we give a logical status to the machinery. 
Evaluation contexts are typed "on the left", as they are directed towards 
their hole, or their input, in contrast to terms, whose type is that of their 
output. A machine state consists of a term and a context, and corresponds 
logically to a cut between a formula on the left (context) and a formula 
on the right (term). Evaluation, viewed logically, is cut-elimination: this 
is the essence of the so-called Curry-Howard isomorphism. Control oper- 
ators correspond to classical reasoning principles, as was first observed by 
Griffin. 

1 A simple call-by-value evaluator 

Consider the following simple functional programming language, whose data 
types are (nonnegative) integers and lists. 

M ::= x | n \ T | F || nil || ?/ || h(Z) || t(Z) || M op M 
Mh[M,M]| MM I Xx.M | Yf.M . 

Here op denotes collectively operations such as addition, multiplication, consing 
(notation a- 1), or equality test of two integers (notation (m = n)); nil is the empty 
list, ?/ tests whether I is empty (i.e., ?nil evaluates to T and ?(a • I) evaluates to 
F), h(/) and t(Z) allow us to retrieve the first element of a list and the rest of the 
list, respectively; Mh [TV, P] passes control to N (P) if M evaluates to T (F); 
MN is function application; Xx.M is function abstraction; finally, Yf.M denotes 
a recursive fonction definition. The more familiar construct (let rec fx = M) 
is denned from it as (Xf.N)(Yf.(Xx.M)). 
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Next, we specify an interpreter for the mini-language. The interpreter progres- 
sively transforms the whole program to be evaluated, and at each step maintains 
a pointer to a subprogram, in which the current work is done. Felleisen and 
Friedman [4] have formalized this using evaluation contexts, which are programs 
with a (single) hole that in our case are built recursively as follows: 

E ::= []\E[[]M]\E[M[\] 

I E[[] opM] I E[M op []] I E[h([})} I E[t([})} || £[?[]] || E[[] ~ [M , M\\ 

The notation should be read as follows: E is a term with a hole, and i?[[]M] 
is the context whose single occurrence of [] has been replaced by []M: thus, in 
i?[[]M], the external square brackets refer to the hole of E, while the internal 
ones refer to the hole of £"[[]M]. For example, [ I []M] = [}M, and if this context 
is called E, then E[[]N] = ([]N)M. 

The abstract machine rewrites expressions E[N], that we write (N | E) to 
stress the interaction (and the symmetry) of terms and contexts. We call such 
pairs ( N \ E ) states, or commands. The initial command is of the form ( M \ [}). 
The rules (in call-by-value) are as follows: 



MN \E) 


- (M\E[[]N\) 


Xx.P\E[[]N\) 


-> (N\E[(Xx.P)[}}) 


V\E[(Xx.P)[}}) 


- (P[z<-V\\E) 


Yf.M E ) 


- (M[f<-Yf.M\\E) 


MopN\E) 


+ (M\E[[]opN\) 


m | E[[] opN}) 


(N\E[mop[}}) 


n E[m op []] ) 


-> ( m opn\ E) 


*(M)\E) 


- (M| £?[*([])]> 


ml\ £?[?([])]> 


- <T||£> 


a-l\E[l{[\)\) 


- (F|S> 


a ■ I \ E[h([})}) 


- (a|^> 


a ■ I \ E[t([})}) 




M ^ [N, P] | E ) 


(M|£?[[]^[JV,P]> 


T\E[[]~[N,P]) - 


- (AM|£> 


F\E[[]~[N,P]) 





(operation performed) 
f* =?,h,t) 



The first rule amounts to moving the pointer to the left son: thus the evaluator 
is also left-to- right. The second rule expresses call-by- value: the argument N of 
the fonction Xx.P must be evaluated before being passed to Xx.P. In the third 
rule, V denotes a value - that is, a function Xx.P, an integer n, or a list / whose 
elements are values (later, we shall add more values) -, that can be passed, i.e., 
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that can be substituted for the formal parameter x. The fourth rule allows us to 
unfold the definition of a recursive function. The last rules specify the (left-to- 
right) evaluation of the binary operations, and the precise meaning of the unary 
operations ?,h and t, as well as of M \— > [ N , P]. 

Notice that the above system of rules is deterministic, as at each step at most 
one rule may apply. 

Exercise 1.1 Characterize the final states, i.e. the states which cannot be rewrit- 
ten. 

Remark 1.2 The call-by-name abstract machine is slightly simpler. The context 
formation rule E[M[}} disappears, as well as the third rule above. The only rule 
which changes is the rule for Xx.P, which is now 

(Xx.P\E[[]N\) -> (P[x<-N]\E) 

i.e., N is passed unevaluated to the function Xx.P. All the other rules stay the 
same. 

Remark 1.3 In call-by-name, the left-to-right order of evaluation given by the 
rule (MN || E) — > (M | i£[[]iV]) is forced upon us: we should not attempt 
to evaluate N first. But in call-by-value, both M and N have to be evaluated, 
and the right-to-left order of evaluation becomes an equally valid strategy. In this 
variant, the first three rules are modified as follows: 

(MN | E) -> (N\E[M[]\) 

(V\E[M[\\) -> (M\E[[]V\) 
(Xx.P\E[[]V}) - (P[x<-V]\E) 

Below, we give a few examples of execution. We first consider a program that 
takes a natural number x as input and returns the product of all prime numbers 
not greater than x. One supposes given an operation 7r? that tests its argument 
for primality, i.e., 7r?(n) evaluates to T if n is prime, and to F if n is not prime. 
The program is a mere transcription of the specification of the problem: 

vr x = Yf.X.n. (n = 1) -> [ 1 , (7r?(n) ^ [ n x f(n - 1) , f(n - 1) ]) ] 

Here is the execution of this program with input 4: 

<Tx(4)|[]> - ((4 = l)^[l,(vr?(4)^[4xvr x (4-l),vr x (4-l)])]||[]) 

- (7r?(4)^[4x7r x (4-l),7r x (4-l)]|[]> 

- <ttx(4-1)|[]> 

-* <Tx(3)|[]> 

->* (3 x 7r x (3- 1) I []> 

->* <7T X (2)|3X[]> 

(7T X (1)|3X(2X[])> 

->* <l||3x(2x[])> 

- (2 I 3 x []> 

- (6|[]> 
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Our next example is the fonction that takes an integer n and a list / as 
arguments and returns / if n does not occur in I, or else the list of the elements 
of / found after the last occurrence of n in /. For example, when applied to 3 
and 1 ■ (3 ■ (2 ■ (3 ■ (4 ■ nil)))), the fonction returns the list 4 ■ nil. The following 
program for this function makes use of an auxiliary list, that can be called an 
accumulator: 

F = Xn.M.iYf.Xh.Xk. ?Zx h- [Z 2 , h(Zi) = ra - [ft(h) t(h) , ft(h) l 2 ] ]) 1 1 

We present the execution of F with inputs 3 and 1 ■ (3 ■ (2 ■ (3 • (4 • nil)))). We set: 

e = Yf.Xk.Xl 2 .?h h- [Z 2 , h(h) = 3^ [ft(k)t(k), ft(h)l 2 }} 

Thus, e "is" F3. We have: 

((F3)(l-(3.(2.(3.(4.m0))))|[]> 
-* ( 6 (1 • (3 • (2 • (3 • (4 • ml))))) (1 • (3 • (2 ■ (3 • (4 ■ mZ))))) || [] > 
-* ( 6 (3 • (2 • (3 • (4 • ml)))) (1 • (3 • (2 ■ (3 • (4 ■ mZ))))) || [] ) 

^( e (2.(3-(4.mO))(2.(3-(4.mO))|[]> 
^(3-(4-mZ))(2-(3-(4-mZ)))||[]> 
^* (e(4-mf) (4-raZ) || []) 
^* (emZ (4 • nil) \ [} ) 
->*(4-mZ| []) 

Note that the execution is tail-recursive: the evaluation context remains empty. 
This is good for efficiency, but, conceptually, handling the auxiliary list is some- 
what "low level" . 

Remark 1.4 Similarly, our first example can be programmed in a tail recursive 
way, as 

Y f.X{n, c). n — 1 i— > [c(l) , f (n — 1, 7r?(n) i— > [ Xp.c(n x p) , c]) ] 

ifere, c is an additional parameter, called the continuation, which is a function 
from natural numbers to natural numbers. This is the continuation passing style 
( CPS). We encourage the reader to run this new program on input 4, and to check 
that the execution is indeed tail-recursive. 

2 Control operators 

We now add two primitive operations, in addition to those of the previous section: 

M ::=••• | Kk.M \ * E 

The second construction allows us to consider, or reflect evaluation contexts as 
values (in addition to those considered above). It is then possible to bind a 
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variable k to a (reflected) context, and thus to memorize and reuse contexts. This 
is what the first construction nk.M does. It exists in programming languages like 
SCHEME, where it is written as (call/cc (lambda (k) M))). We add two rules 
to the abstract machine: 

(Kk.M\E) -> (M[k<-* E ]\E) 
(* El \E 2 [[]N}) -> (NjE,) 

Note that the second rule throws away the current evaluation context E 2 and 
replaces it with a context E\ captured earlier using the first rule. 

We illustrate the new primitives through some examples. First, consider the 
function that takes as input a list of integers and returns the product of the 
elements of the list. A naive program for this function is: 

n x = Yf.xi.n^[i,h(i)xf(t(i)} 

The execution of this program applied to the list [2,4,3,0,7,8,1,13] involves the 
full multiplication 2 x (4 x (3 x (0 x (7 x (8 x (1 x 13)))))), which is not particularly 
perspicuous, given that 0 is absorbing for x . A better try is: 

n 2 = Yf.Xl. ?/ h- [ 1 , (h(Z) = 0) -> [ 0 , h(Z) x f(t(l) } } 

Here, the final multiplications by 7, 8, 1, and 13 have been avoided. But the 
execution still involves the successive multiplications of 0 by 3, 4, and 2. The 
following program, which makes use of the control operator k, takes care of this: 

n 3 = Yf.Xl.uk. ?Z ■-> [ 1 , (h(Z) = 0) i-> [ k 0 , h(Z) x /(t(Z) ] ] 

It is easily checked that the execution on the same input [2,4,3,0,7,8,1,13] now 
returns 0 without performing any multiplication. 

Remark 2.1 We can reach the same goal (of avoiding any multiplication vy 0) 
using CPS (cf Remark 1.4)- The CPS tail-recursive version ofU 2 is: 

n 4 = Yf.XIXk". ?Z i-> [k" 1 , (h(Z) — 0) \-y [k" 0 , f(t(l)(\x.k"(h(l) x x))] ] 

It should be clear how tail-recursiveness is achieved: the additional parameter 
k" is an abstraction of the stack/ context. If k" currently stands for E, then 
Xx.k"(h(l) x x) stands for E[h(l) x []]. The program n 4 does no better than U 2 , 
as it does not avoid to multiply by zero back along the recursive calls. But the 
following program n 5 avoids this: 

n 5 = Yf.XIXk'. ?l \-y [k' 1 , (h(Z) = 0) h-> [0 , f(t(l)(Xx.k'(h(l) x x)) ] ] 

We owe to Olivier Danvy the following rationale for a smooth transformation 
from n 4 to n 5 . The program n 4 takes a list and a function from nat (the type 
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of natural numbers) to nat as arguments and returns a natural number. Now, 
natural numbers split into 0 and (strictly) positive numbers, let us write this as 
nat = 0 + nat*. There is a well-known isomorphism between (A + B) — ^ C and 
(A — > C) x (B — > C) . By all this, we can rewrite H4 as 

n' 5 = Yf.XIXk'Xk". 11 1-> [Jfc'1, (h(Z) =0) i-> [Jfc"0, f(t(l)(Xx.k'(h(l) x x))\\ 

(with k : 0 — > nat and A;' : nat* — > nat, where (k, k') represents k" : nat — > nat / 
VFe £/ien remark that k is not modified along the recursive calls, hence there is no 
need to carry it around. Assuming that k was initially mapping 0 to 0, we obtain 
II5. So, the CPS program II5 gets rid of k and retains only k! . Quite dually, 
we could say that the program II4 gets rid of k! ( which has the normal control 
behaviour) and retains only k (whose exceptional control behaviour is handled via 
the k abstraction) . 



A similar use of k abstraction leads to a more "natural" way of programming 
the function underlying program F of section 1: 

F' = Xn.Xl.Kk.(Yf.Xh.?h ^[nil, (h(h) = n) » [ k(f(t(h))) , h(h)-f(t(h)) ] ]) I 

We set e' = Yf.Xh. ?h ^ [nil , (h(h) = 3) ^ [*p(/(t(Zi))) , h(h) ■ f(t(h)) }})l, 
and we abbreviate 4 ■ nil as 4. Here is the execution of F' on the same input as 
above: 

(F'(3)(l-(3-(2.(3-4))))|[]) ^* (6'(l-(3-(2-(3-4))))|[]) 

^* (e' (3-(2-(3-4)))|l-[]> 
^* (^ [] (6'(2-(3-4)))Il-[]> 
->* <e'(2-(3-4))|[]> 
->* (4|[]> 



Exercise 2.2 Consider a slight variation of the toy language, in which lists 
are replaced by binary trees whose leafs are labeled by integers. This is achieved by 
reusing the operations ■, h 7 t, ?, and by removing nil: a tree t is either a number 
or is of the form t\ ■ t<i~, the meaning ofh and t are "left immediate subtree" and 
"right immediate subtree", respectively; It is now a function from trees to a sum 
type whose values are F or integers, it returns F if t = t\-ti and n if t = n. The 
weight of a tree is computed as follows: w(n) = n, andw(t\-t2) = w(t\)+w(t2)+l. 
A tree is called well-balanced if t = n, or if t = ti ■ t 2 and w(ti) = wfa) and ti, t% 
are well-balanced. Write three programs for testing if a tree is well-balanced. All 
programs should traverse the input tree only once. The second program should 
save on weight computations, the third one should also save on successive returns 
of the negative information that the tree is not well-balanced. (Hint: for the first 
two programs, make use of the above sum type.) 
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So far, we have only demonstrated how the k construct allows us to escape 
from an evaluation context. The following exercises propose examples where 
continuations are passed around in more sophisticated ways. Exercises 2.4 and 
2.5 are variations on the theme of coroutines. Coroutines are two programs that 
are designed to be executed in an interleaving mode, each with its own stack of 
execution. Each program works in turn for a while until it calls the other. Call 
them P and Q, respectively. When P calls Q, the execution of P is suspended 
until P is called back by Q, and then P resumes its execution in the context it 
had reached at the time of its last suspension. 

Exercise 2.3 [11, 12] The following programs illustrate the reuse of evaluation 
contexts or continuations. What do they compute? 

(Kk.Xx.k(Xy.x + y)) 6 

Kl.(X(a, h).h(a + 7))(r(3, /)) (r = X(n, p) .Kk.(Xm.k(m, p))(Kq.k(n, q))) 

Exercise 2.4 [12] Consider the following programs: 

7r = Xa.(f>(Xx. write a; x) et <p = Xf.Xh.nk.h(fk) 

where the new command write applies to a character string, say, 'toto, and is 
executed as follows: 

( write ' toto; M | E) — > (M \E) \toto 

by which we mean that the execution prints or displays toto and then proceeds. 
Describe the execution of (n' ping) (n' pong). Does it terminate? Which successive 
strings are printed? 

Exercise 2.5 [8] The toy language is extended with references and commands: 

M := • • • | let x = ref V in M \ \x \x:—V \ M; M 

(a variable defined wih the ref construct is called a reference). The machine 
states have now a store component (a list S of term/reference associations), no- 
tation ( M I E )s- The evaluation rules are as follows: 

(M\E) S -> ( M' | E' ) s {for all the above rules (M \ E) — > (M' \E') 
(letx = ref V in N \ E ) s -> (N || E) S [ x <-v] {x not defined in S) 
(\x\E) s - {S(x)\E) s 
(x:=V\E) s -> (\E) S[X ^ V] 
(M;N\E) S - (M\E[\\;N])s 
(I E[[}; N])s - (N\E[]) S 

Write two programs get_first and get_next that work on a binary tree (cf. 
exercise 2) and whose effects are the following: (get_f irst t) returns the value 
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of the first leave (in left-to-right traversal) oft, and then evaluations o/get_next 
return the values of the leaves of t in turn, suspending the traversal between 
two get_next calls. (Hints: define two references and two auxiliary functions 
start and suspend that use k abstraction to store the stack in the respective 
references: start is invoked by get_f irst and get_next at the beginning (storing 
the context of the caller who communicates with the tree via these get functions), 
while suspend is invoked when the value of a leaf is returned (storing the context 
that will guide the search for the next leave).) 

3 Curry- Howard 

In this section, we assign typing judgements to terms M, contexts E, and com- 
mands c = (M | E). We restrict our attention to A-calculus, extended with 
the above control operations. We also switch to call-by-name, for simplicity (cf. 
remark 1.2). In this section, we adopt the alternative notation M ■ E for £"[[]M] 
("push M on top of E considered as a stack"). The resulting syntax is as follows: 

M ::= x | MN | Xx.M || nk.M || * E 
E ::= [} \ M ■ E 

The abstract machine for this restricted language, called A/t-calculus [2], boils 
down to the following four rules: 

( MN | E ) -> (M \ N ■ E) 
\\x.M\N-E) -> {M[x<- N] I E) 
{ Kk.M \E) -> ( M[k <— *e] I E ) 
\M-E 2 ) -> (M\E X ) 

Note that the first rule suggests that the application and the push operation are 
redundant. As a matter fact, we shall remove the application from the syntax in 
a short while. 

As is well-known, terms are usually typed through judgements Y h M : A, 
where Y is a sequence x± : A\, . . . , x n : A n of variable declarations, and where M 
can also be interpreted as a notation for a proof tree of the sequent Ai, . . . , A n h 
A. Let us recall the notion of sequent, due do the logician Gentzen (for an 
introduction to sequent calculus, we refer to, say, [5]). A sequent is given by two 
lists of formulas, separated by the sign h (which one reads as "proves"): 

Ai, ■ ■ ■ ,A m h .Bi, . . . , B n 

The intended meaning is: "if A\ and . . . and A m , then Bi or ... or B n " . The 
Ai's are the assumptions, and the B^s are the conclusions. Notice that there 
may be several formulas on the right of K In sequent calculus , limiting the right 
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hand side list to consist of exactly one formula corresponds to intuitionistic logic. 
As a hint as to why multiple conclusions have to do with classical reasoning, let 
us examine how we can derive the excluded middle ->A V A (the typical non- 
constructive tautology of classical logic) from the very innocuous axiom A h A. 
First, we denote false as _L, and we encode ->A as A — > _L (a simple truth-table 
check will convince the reader that the encoding is sensible). Then, we use the 
multi-conclusion facility to do a right weakening. Weakening means adding more 
assumptions, or more conclusions (or both), its validity corresponds to something 
like "one who can do the most can do less" . And finally, one gets the excluded 
middle by right implication introduction (see below): 

A\- A 
Ah ±,A 

h ->A, A 

As we shall see, control operators lead us outside of intuitionistic logic, so we 
shall adopt unconstrained sequents rightaway. 

Sequents may be combined to form proofs, through a few deduction rules. 
Here are two of them: 

T\AhA T \- A\A T,AhB\A 

r h a rhA-> b\a 

The first rule is the cut rule, that can be interpreted backwards as "proving a 
theorem with the help of a lemma": in order to prove A from assumptions T, 
we first prove an auxiliary property A, and then prove A, taking the auxiliary 
property as an additional assumption. The second rule is the one corresponding 
to A-abstraction. Read A — > B as a function type. Then a program of type 
B depending on a parameter x of type A can be viewed as a function of type 
A — > B. (The role of the vertical bars in the sequents is explained in the next 
paragraph.) 

More generally, the Curry-Howard isomorphism says that there is a one-to-one 
correspondence between proofs and programs. We shall extend here the corre- 
spondence to let also contexts and commands fit into it. We shall consider three 
sorts of sequents, corresponding to terms, contexts, and commands, respectively. 
They are given in the following table: 

. . . , Ai, . . . h B | . . . , Bj, . . . j f ...,x i :A i ,...\-M:B\...,a j :B j ,... 

. . . , Ai, . . . | A h . . . , Bj, . . . I < — J ...,x i :A i ,...\E:A\-...,a j :B j ,... 
. . . , Ai, , . . . h . . . , Bj, ... J [ c :(..., Xi : A iy . . . h . . . , a>j : Bj, . . .) 

In the sequents corresponding to terms, one conclusion is singled out as the 
current one, and is placed between the h and the vertical bar. Symmetrically, 
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in the sequents corresponding to contexts, one assumption is singled out as the 
current one, and is placed between the vertical bar and the K A command is 
obtained by cutting a conclusion that is singled out against an assumption that is 
singled out, and the resulting sequent has no conclusion nor assumption singled 
out. 

We now turn to the typing rules. But we first note that the evaluation rule 
for k is rather complicated: it involves copying the context, and transforming one 
of the copies into a term. It turns out that both nk.M and *e can be encoded 
simply using a more primitive operation: Parigot's /^-abstraction [9], which has 
the following behaviour: 



Moreover, the application can also be encoded with the help of the /x abstraction. 
The encodings are as follows (cf. also [3]): 



Exercise 3.1 Check that the encodings simulate the evaluation rules for *e, 
nk.M, and MN. 

Exercise 3.2 Prove the following equality: 

(Kk.M)N = K k'.M[k «- Xm.k\mN)]N . 

More precisely, prove that the encodings of the two sides of this equality have a 
common reduct. 

Note that the fi operation involves an explicit continuation variable (that may 
be bound to a context), while k does not (it involves an ordinary variable that 
may be bound to a term representing a context). We shall give typing rules for 
the following more primitive syntax, called A/i-calculus [1]: 




c[a 





M ::= x | Xx.M | fxa.c 
E ::= a \ M ■ E 
c::=(M\E) 



with the following reduction rules: 



(Xx.M \ N ■ E) 
( \ict.c | E) — > < 



c[a 



(M[x 
-E] 



N]\E) 



10 



Note that in addition to the ordinary variables (x, y, k, k', . . .), there are now 
first-class continuation variables a, in place of the (constant) empty context (the 
top-level continuation). The typing rules are as follows: 



r | a : A h a : A, A 



r, x : A h x : A | A 



r h M : A| A 



r|E: fih A 



r, x : A h M : E | A 



r | (M • E) : A -> B h A 



r h Ax.M : A 



B| A 



c : (r h (3 : B , A) 



r h M : A I A 



r|E : A h A 



r h n(3.c : B | A 



<M|£):(rhA) 



Let us read the rules logically. The first two rules are variations of the axiom: a 
sequent holds if one formula A is both among the assumptions and the conclu- 
sions. The following two rules correspond to the introduction of the implication 
on the right and on the left: this is typical of sequent calculus style. The rule for 
ji can be viewed as a sort of coercion: the sequent to be proved does not vary, 
but the status of the sequent changes from having no assumption or conclusion 
singled out to having one conclusion singled out, which is a key step in writing a 
cut (the final rule, which we already commented on earlier). 

Remark 3.3 (for the logically oriented reader) In this typing system, we 
have left contraction (e.g., from T,A,A h A deduce T,A h A) and weakening 
implicit: weakening is built-in in the two axioms for variables and continuation 
variables (when T or A or both are non-empty), and contraction is implicit in 
the "push" rule (M ■ E) and in the cut rule ((M\E)). 

Beyond the particularity of having a conclusion or an assumption singled out, 
the above rules are nothing but the rules of sequent calculus, and the above encod- 
ing of application is the essence of the translation from natural deduction style to 
sequent calculus style [5]. 

Exercise 3.4 Give a technical contents to the second part of remark 3.3, by 
defining a translation from \-calculus to Xfi-calculus that preserves reductions. 
(Note that in the \fi-calculus, the evaluation rules are not deterministic anymore: 
since commands are recursively part of the syntax, it makes sense to reduce not 
only at the root.) 

Now we can derive the typing rules for nk.M and -k E : 
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T,x : Ah x : A\A T\E : A\- A 
(x\E) : (T,x : A\- A) 
T,x : A h /xoi.(x || E) : R\ A 
T h * E : A -> i? I A 

Here, i? is an arbitrary (fixed) formula/type of results. Note that we have slightly 
departed from the typing rules as written above, in order to make the essential 
use of weakening explicit: a : R is a fresh variable. 

T | p : A h A, (3 : A 

rh^: A->i2|A,/3: A T \ [3 : A\- A, [3 : A T,k : A -> #h M : A|A 
r I *g •/? : (A -> i?) -> A h A, /? : A T h Xk.M : (A —> R) —> A \ A 

(Xk.M \*f}-P) : (rh A,/?: A) 
T h Kk.M :A\A 

The last derivation reveals one of these unexpected mysteries that makes re- 
search so fascinating. The control feature encoded by k abstraction corresponds 
under the Curry-Howard correspondence to reasoning by contradiction, as first 
discovered in [7]. Indeed, think of R as _L Then A — > R is ->A, and 

T , k : A ^ R \- M : A \ A 

T h Kk.M : A\ A 

reads as: "if we can prove A assuming -iA, then we reach a contradiction, and 
hence A is proved". The implication ((A — > R) — > A) — > A is known as Peirce's 
law. The reader will find related classical reasoning principles in the following 
exercise. 

Exercise 3.5 We call the sequents -i-iA h A and _L h A double negation elimi- 
nation and _L elimination, respectively. 

(1) STicw £/&a£ Peirce's law plus _L elimination imply double negation elimination 
(hint: apply the contravariance of implication, i.e., if A' implies A, then A — > £> 
implies A' — > 

(2) STiow i/ia£ double negation elimination implies _L elimination (hint: prove 
that _L implies —i—>B). 

(3) STiow £/ia£ double negation elimination implies Peirce's law (hint: use (2)). 
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Remark 3.6 Double negation elimination (cf. exercise 3.5) corresponds to an- 
other control operator, Felleisen's C, whose behaviour is the following: 

(C{M)\E) - ( M | * B • [ ] ) 

Thus, C(Xk.M) is quite similar to nk.M, except that the stack is not copied, but 
only captured. The Xfi counterpart of C(M) is given by fif3.{M | *g • a) where 
the variables [3 and a are not free in M; a can be understood as a name for 
the toplevel continuation. The typing, as literally induced by the encoding, is as 
follows 

Th M : (A -> R) -> R\A 

r hC(M) :A\a:R,A 

It looks a little odd, because a is a variable not mentioned in the C construction. 
One way out is to assimilate R with _L 7 which amounts to viewing R as the 
(unique) type of final results. Then we can remove altogether a : _L from the 
judgment (as "A or _L" is the same as A), and obtain: 

rhM:(A-^l)-^l|A 

T hC(M) : A\ A 
i.e., "C is double negation elimination" [7]. 

4 Conclusion 

We have shown some basic relations between continuations and control operators, 
abstract machines, and sequent caclulus. The connection with logic is lost when 
we admit recursion into the language (section 2). But the detour through logic 
is extremely useful, as it brings to light a deep symmetry between terms and 
contexts. 

The A/i calculus can be extracted from the logical considerations and can then 
be considered as un untyped calculus per se. An extension of the A/i-calculus that 
allows for a completely symmetric account of call-by-name and call-by-value is 
presented in [1]. 
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